tocsin

Go/github.com/argoproj/argo-cd/v3 CVE-2026-77459: unknown

Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cd

Action: Upgrade github.com/argoproj/argo-cd/v3 to 3.3.15 or later.

go get github.com/argoproj/argo-cd/v3@v3.3.15
go get github.com/argoproj/argo-cd/v3@v3.4.10
go get github.com/argoproj/argo-cd/v3@v3.5.4
go get github.com/argoproj/argo-cd/v3@v3.6.0-rc2

Affected

introducedfixedlast affected
3.0.03.3.15-
3.4.03.4.10-
3.5.03.5.4-
3.6.0-rc13.6.0-rc2-

Fixed versions

3.3.153.4.103.5.43.6.0-rc2

Sources

CVE-2026-77459 · published · modified · JSON